Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa
File: 34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa (raw, json)
Hash identifier: fI5/8zLUXdoe5YTRnx/bl7saSUK2MXzzrQOUxxfejE0=
Subject key identifier: BB:57:6D:44:D0:57:4B:AE:07:8B:9D:17:36:E7:53:38:86:28:1A:F6
Certificate issuer: /CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF
Certificate serial: 55DC78F7B23399D981832B32303D0FD837971B1A
Authority key identifier: AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa
Signing time: Thu 29 May 2025 12:42:57 +0000
ROA not before: Thu 29 May 2025 12:37:57 +0000
ROA not after: Thu 28 May 2026 12:42:57 +0000
asID: 267116
IP address blocks: 45.229.116.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:dc:78:f7:b2:33:99:d9:81:83:2b:32:30:3d:0f:d8:37:97:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF
Validity
Not Before: May 29 12:37:57 2025 GMT
Not After : May 28 12:42:57 2026 GMT
Subject: CN=BB576D44D0574BAE078B9D1736E7533886281AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:79:b8:f2:3f:b6:1c:07:72:3e:de:17:c9:
3c:dd:67:dc:e1:7f:a8:97:17:52:cb:c7:c4:bc:ad:
a5:bc:ea:86:5f:79:25:39:49:19:51:46:b4:c3:22:
f9:73:81:ad:f8:93:86:92:a0:51:a3:20:62:0f:3f:
68:da:52:a2:ad:17:04:65:65:53:94:aa:d5:d5:67:
7c:93:d9:19:10:7a:3e:23:0b:ec:7c:15:3f:d8:24:
90:cb:52:a9:44:01:af:10:a2:b7:f1:db:77:2e:4e:
9b:32:91:a8:72:03:61:36:ef:7b:0b:bf:04:71:27:
5b:92:a5:1e:1f:c0:2f:c5:a2:d2:b5:de:f1:73:f2:
2c:99:ab:66:67:e1:08:3d:7a:85:56:d9:30:83:81:
5f:e2:97:d8:e6:83:9a:f5:8e:7a:79:df:88:05:fc:
c9:75:f8:e0:f5:87:fd:99:cc:be:1f:e4:53:a1:97:
b0:b1:01:9d:91:6e:ce:11:14:61:f4:14:98:53:56:
42:9c:58:08:e3:9f:ba:14:28:ab:2a:d9:bd:46:a9:
3b:0a:65:d1:88:16:ee:1c:7e:71:b3:f0:52:51:95:
45:50:49:61:ae:5a:9a:c9:f9:a2:9c:36:fb:d7:21:
55:16:a8:1d:0e:16:be:58:4b:6c:68:b7:32:be:8c:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:6D:44:D0:57:4B:AE:07:8B:9D:17:36:E7:53:38:86:28:1A:F6
X509v3 Authority Key Identifier:
keyid:AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:7c:ee:77:99:2b:a8:0d:a8:1d:4e:74:7a:02:9e:83:1c:7f:
e3:b6:12:b6:f9:b6:c3:e8:30:13:db:cf:b9:67:d8:19:08:3d:
d8:50:c0:ae:cf:9b:92:79:1c:a8:78:f2:30:fd:d6:99:ab:d6:
7e:29:01:d3:ce:d7:78:ce:9f:c0:2c:6e:ba:9a:42:96:df:fa:
4b:af:4d:65:8a:7e:80:d3:5c:01:0d:0e:cd:9e:1b:42:c5:67:
3d:cb:af:09:f7:74:cd:06:5a:09:c7:21:c9:c2:9c:fe:7b:26:
5b:9d:c4:b7:c2:ba:31:38:33:50:de:fa:79:bd:d9:5a:a7:22:
3f:2e:de:f3:a2:38:fd:7f:c0:37:d5:e2:b8:fc:b7:bc:0d:39:
ad:9f:f7:0d:85:f5:0a:25:d4:d1:aa:e7:e3:8b:59:8f:96:74:
fd:99:56:a7:d0:1e:6e:88:f7:4c:bd:19:f0:35:51:b5:5f:70:
25:f9:4f:0e:a9:d6:ea:f2:68:38:b1:a8:b9:7c:0c:c6:0a:6e:
72:b3:2f:b8:9b:b6:32:f2:5f:b9:79:44:48:6c:58:82:e0:55:
f0:ab:a9:fd:85:e1:b4:09:22:95:31:71:df:e7:96:85:cd:97:
f2:ae:03:47:70:f6:3e:f7:73:67:9c:44:44:6b:95:20:98:b9:
49:c8:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:38:46 2025 by rpki-client